An audience favorite from the archives – Walter Belgers with “Physical Penetration Testing”. This a great example of a presentation, which hasn’t aged a day since as updates to physical security controls rarely happen at regular predefined intervals. In addition to being good fun, covert entry can also save time and effort if you happen …
The post Physical Penetration Testing first appeared on t2 infosec hybrid competence center.]]>An audience favorite from the archives – Walter Belgers with “Physical Penetration Testing”. This a great example of a presentation, which hasn’t aged a day since as updates to physical security controls rarely happen at regular predefined intervals. In addition to being good fun, covert entry can also save time and effort if you happen to *krhm* forget your keys.
The content was tailored to include material specific to Finland. Impatient viewers just wanting to see the Abloy Classic lockpicking can start the video from 47:07. Those watching the presentation more carefully might notice the mention of a familiar name who presented at t2’17.
The post Physical Penetration Testing first appeared on t2 infosec hybrid competence center.]]>In this video from t2’15 Artturi Lehtiö peers inside over 7 years of state sponsored malware operations. The presentation covers themes such as less glamorous side of APT research, tools and approaches, in addition to the challenges related to publishing this type of information. Those into offensive work can view the video as training material …
The post Cosmic Duke first appeared on t2 infosec hybrid competence center.]]>In this video from t2’15 Artturi Lehtiö peers inside over 7 years of state sponsored malware operations. The presentation covers themes such as less glamorous side of APT research, tools and approaches, in addition to the challenges related to publishing this type of information.
Those into offensive work can view the video as training material for improving tradecraft.
For additional information on the subject, here are the links for the whitepapers mentioned during the talk.
The post Cosmic Duke first appeared on t2 infosec hybrid competence center.]]>A great way to steal someone’s secrets is often just listening carefully enough. At t2’15  Lev Pachmanov, Daniel Genkin, Itamar Pipman and Eran Tromer from Tel Aviv University demonstrated in practice how sensitive information can be pilfered with a sausage (or a Pita bread, if you’re vegetarian). In all seriousness, this has to be one of …
The post Physical Side-Channel Attacks on PCs first appeared on t2 infosec hybrid competence center.]]>A great way to steal someone’s secrets is often just listening carefully enough. At t2’15  Lev Pachmanov, Daniel Genkin, Itamar Pipman and Eran Tromer from Tel Aviv University demonstrated in practice how sensitive information can be pilfered with a sausage (or a Pita bread, if you’re vegetarian). In all seriousness, this has to be one of the funniest publicly delivered presentations on gathering electromagnetic emanations.
Whether you are into emission security or collecting signals intelligence, we’re sure you will enjoy this talk.
The post Physical Side-Channel Attacks on PCs first appeared on t2 infosec hybrid competence center.]]>We’re continuing with the theme of securing international travel by releasing Andrea Barisani‘s Forging the USB Armory talk from t2’15. Those enjoying international travel and/or operational situations, the dual-use capabilities of the platform might be something of interest. From safe USB charger, encrypted file storage and automated self-destruct, password manager, TOR access point to portable offensive …
The post Forging the USB Armory first appeared on t2 infosec hybrid competence center.]]>We’re continuing with the theme of securing international travel by releasing Andrea Barisani‘s Forging the USB Armory talk from t2’15.
Those enjoying international travel and/or operational situations, the dual-use capabilities of the platform might be something of interest. From safe USB charger, encrypted file storage and automated self-destruct, password manager, TOR access point to portable offensive toolkit, the opportunities are endless. Even if open source hardware design is outside your comfort zone, the video gives you a good glimpse into solving hard problems and the capabilities of USB Armory.
Again, as with all our curated releases, this is a must see – enjoy!
The code is available on GitHub, slides here and INTERLOCK code here.
The post Forging the USB Armory first appeared on t2 infosec hybrid competence center.]]>International travel can be difficult, and for a security conscious person especially so. In this video from t2’15 Georg Wicherski demonstrates a way of solving many problems related to carrying a personal computing device with you. For a person crossing borders on a regular basis or otherwise in need of heightened security for their laptop, …
Continue reading "Building a Reasonably Safe Travel Burner Laptop"
The post Building a Reasonably Safe Travel Burner Laptop first appeared on t2 infosec hybrid competence center.]]>International travel can be difficult, and for a security conscious person especially so.
In this video from t2’15 Georg Wicherski demonstrates a way of solving many problems related to carrying a personal computing device with you. For a person crossing borders on a regular basis or otherwise in need of heightened security for their laptop, this is a must see. Enjoy!
Do note that this has been actually implemented in practice instead of being just intellectual mastu^H^H^H a mental exercise. For more details about the setup, refer to the GitHub repository. The setup has been since updated to support TPM remote attestation.
Those in the business of securing enterprises and organizations should definitely watch OlleB‘s presentation from t2’15. Moving from point-in-time <insert-product-name-here> scans to a more structured approach using graphs, attack models, understanding and eradicating vulnerability classes or using safety/assurance cases is a long-term security investment. Taking your defensive game to the next level requires trying out …
Continue reading "If Attackers Can Use Graphs, Then Why Can’t We?"
The post If Attackers Can Use Graphs, Then Why Canât We? first appeared on t2 infosec hybrid competence center.]]>Those in the business of securing enterprises and organizations should definitely watch OlleB‘s presentation from t2’15. Moving from point-in-time <insert-product-name-here> scans to a more structured approach using graphs, attack models, understanding and eradicating vulnerability classes or using safety/assurance cases is a long-term security investment.
Taking your defensive game to the next level requires trying out new approaches to old problems and sometimes challenging the conventional wisdom. This video should give you food for thought – it’s one of our favorites!
The post If Attackers Can Use Graphs, Then Why Canât We? first appeared on t2 infosec hybrid competence center.]]>In real life, technical superiority is one thing and an ability to present your work is another. So, without further ado – best write-up for t2’15 Challenge: Solving the t2’15 Challenge â Juha Kivekäs Merry Christmas and Happy New Year!
The post t2â15 Challenge Solution first appeared on t2 infosec hybrid competence center.]]>In real life, technical superiority is one thing and an ability to present your work is another.
So, without further ado – best write-up for t2’15 Challenge:
Merry Christmas and Happy New Year!
The post t2â15 Challenge Solution first appeared on t2 infosec hybrid competence center.]]>To all those who contributed to the hybrid competence center either as an attendee or as a speaker: Thank You! If you have any questions/comments/feedback please let us know – we would love to make the con even better.
The post t2â15 is over â Thank You! first appeared on t2 infosec hybrid competence center.]]>To all those who contributed to the hybrid competence center either as an attendee or as a speaker: Thank You!
If you have any questions/comments/feedback please let us know – we would love to make the con even better.
The post t2â15 is over â Thank You! first appeared on t2 infosec hybrid competence center.]]>Richard Baranyi (Crypto wizard23) from Slovakia was the first one to solve the t2’15 Challenge. Well done! Congratulations! The elegant write-up trophy goes to Juha Kivekäs, Finland. His write-up will be published soon so you’ll have a change to evaluate the submission yourself. Congratulations to both winners! We would also like to thank each one of you who participated. …
The post t2â15 Challenge winners first appeared on t2 infosec hybrid competence center.]]>Richard Baranyi (Crypto wizard23) from Slovakia was the first one to solve the t2’15 Challenge. Well done! Congratulations!
The elegant write-up trophy goes to Juha Kivekäs, Finland. His write-up will be published soon so you’ll have a change to evaluate the submission yourself.
Congratulations to both winners! We would also like to thank each one of you who participated. Last but not least. if you have an interesting idea for t2’16 Challenge, please let us know – authors get a free admission to the hybrid competence center among other perks 
This is just a quick note to let you know that the schedule for t2’15 is now available in RSS and ICS formats.
The post t2â15 Schedule now available in RSS and ICS formats first appeared on t2 infosec hybrid competence center.]]>This is just a quick note to let you know that the schedule for t2’15 is now available in RSS and ICS formats.
The post t2â15 Schedule now available in RSS and ICS formats first appeared on t2 infosec hybrid competence center.]]>